CVE-2024-28432

DedeCMS v5.7 is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability within the /dede/article_edit.php component. This flaw allows an attacker to perform malicious requests on behalf of an authenticated user. As a temporary workaround, it is recommended to restrict access to the affect...

CVE-2024-28677

DedeCMS v5.7 is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability involving the /dede/article_keywords_main.php endpoint. This flaw allows an attacker to potentially perform unauthorized actions on behalf of a logged-in user. As of the provided documentation, there is no informatio...

CVE-2024-28668

DedeCMS v5.7 is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability located in the /dede/mychannel_add.php component. This vulnerability allows an attacker to perform unauthorized actions by tricking a victim's browser into sending a forged request to the application. While no officia...

CVE-2024-28671

DedeCMS v5.7 is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability affecting the /dede/stepselect_main.php API endpoint. This flaw allows an attacker to perform unauthorized actions by tricking a victim's browser into making requests to the target system. As a temporary workaround, i...

WordPress Plugin Visual Composer Premium Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

MSMS-PHP 1.0 SQL Injection

Title: MSMS-PHP by: oretnom23 v1.0 Multiple-SQLi Author: nu11secur1ty Date: 03/13/2024 Vendor: https://github.com/oretnom23 Software: https://www.sourcecodester.com/php/14924/online-mobile-store-management-system-using-php-free-source-code.html Reference:...

CVE-2024-28121

CVE-2024-28121 affects StimulusReflex. A websocket payload targeting a reflex can trigger arbitrary method calls on the reflex instance, because the server locates the method and uses it (via public_send) without strict validation, risking unsafe methods (e.g., instance_variable_set, system). Thi...

CVE-2024-1304

Cross-site scripting vulnerability in Badger Meter Monitool that affects versions up to 4.6.3 and earlier. This vulnerability allows a remote attacker to send a specially crafted javascript payload to an authenticated user and partially hijack their browser session...

CVE-2024-1226

The CVE-2024-1226 entry concerns Rejetto Http File Server, where the software does not properly neutralize certain characters when data is placed in outgoing HTTP headers. This header injection can allow an attacker to control the HTTP response and potentially perform cross-site scripting and cac...

yallasave.ae Cross Site Scripting vulnerability OBB-3870014

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

barttrompstichting.nl Cross Site Scripting vulnerability OBB-3869906

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PHP-MYSQL-User-Login-System Unauthorized Access

The vulnerability of the /login.php component of the PHP-MYSQL-User-Login-System registration and login system is related to the lack of security measures for SQL query structures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the...

ciberspaces.net Cross Site Scripting vulnerability OBB-3868941

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Akaunting < 3.1.3 - RCE

Exploit Title: Akaunting 3.1.3 - RCE Date: 08/02/2024 Exploit Author: [email protected] Vendor Homepage: https://akaunting.com Software Link: https://github.com/akaunting/akaunting Version: = 3.1.3 Tested on: Ubuntu 22.04 CVE : CVE-2024-22836 !/usr/bin/python3 import sys import re import requests...

Elevate Your Web Monitoring Experience with Managed Web Monitoring

...

CVE-2024-23263

A logic issue was identified in the WebKit engine (specifically affecting WebKitGTK , WPE WebKit , and webkitgtk4 ) where processing maliciously crafted web content could prevent Content Security Policy from being enforced. The vulnerability was addressed with improved validation . This issue is ...

PHP MySQL User Signup Login System SQL Injection Vulnerability

The PHP MySQL User Signup Login System is a login and registration form using HTML, PHP and MySQL. A SQL injection vulnerability exists in version 1.0 of the PHP MySQL User Signup Login System, which originates from an SQL injection vulnerability in the email parameter of the /login.php file...

CVE-2022-46091

The Online Flight Booking Management System v1.0 is vulnerable to a Cross Site Scripting (XSS) flaw in its feedback form. The root cause is the improper neutralization of input, which allows an attacker to inject a crafted payload into the airline parameter to execute arbitrary web scripts or HTM...

marcberniershow.com Cross Site Scripting vulnerability OBB-3865939

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mkingadc.go.tz Cross Site Scripting vulnerability OBB-3865703

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...